What is the cheapest VMC or CMC certificate?

Of the prices listed here, SSL2BUY’s GlobalSign-powered Prime certificates are cheapest for a one-year, one-domain purchase: $900 for a VMC or $750 for a CMC . Compare the total payable for your purchase term and every sending domain. A lower advertised annual rate may require a multi-year purchase, and trademark fees are separate.

Can I get a free VMC or CMC certificate?

None of the issuers in this comparison offers a free VMC or CMC. A free SSL/TLS certificate secures the website hosting your files; it does not validate your logo and cannot replace the VMC or CMC Gmail requires . A free BIMI record generator creates the DNS record, not the certificate.

Should I buy a VMC or CMC directly from the issuer or through a reseller?

A reseller can offer a lower purchase price, but the named certificate authority still performs validation and issues the certificate. Check the issuer against the BIMI Group’s issuer directory , then compare who handles validation questions, file hosting, renewals and reissuance. Paying more to buy directly does not change a CMC into a VMC or add Gmail’s checkmark to a CMC.

Can one VMC or CMC certificate cover multiple domains and subdomains?

It depends on the issuer and product. GlobalSign allows one mark certificate to cover multiple domains and subdomains when they use the exact same logo. Each sending name must be covered by the certificate, and additional domains can cost extra. Ask for a quote listing every domain and subdomain; owning them does not automatically extend the certificate’s coverage.

How do I get a VMC or CMC certificate, and how long does it take?

Order from an issuer or reseller, then complete organization, domain-control and logo validation. SSL.com quotes 3–5 business days for CMC validation , depending on the documentation. DigiCert says it can usually issue on the same day once all required documentation is verified ; that is not a same-day promise from purchase. Registering a logo trademark, if needed for a VMC, happens before certificate issuance and adds a separate wait.

Do VMC and CMC certificates need to be renewed every year?

Yes, plan for renewal or reissuance about once a year. DigiCert’s maximum certificate validity is 397 days , including certificates issued under a multi-year plan. Buying three years of coverage does not give you one certificate that stays valid for three years. Confirm whether your seller updates the hosted certificate automatically or whether you must replace the PEM file yourself before expiry.

Learn

BIMI

List of BIMI VMC and CMC certificate providers and prices

Michael Ko

Co-founder & CEO, Suped

Published 9 Oct 2026

Updated 11 Oct 2026

4 min read

Summarize with

DigiCert, GlobalSign and SSL.com are the three certificate issuers listed in the BIMI Group’s issuer directory. All three offer Verified Mark Certificates (VMCs) and Common Mark Certificates (CMCs). The table below compares direct purchases with reseller prices.

VMC and CMC certificate prices in USD

Prices are in USD for one year and one domain, checked on 9–11 October 2026. Each amount links to the seller’s product page. Trademark registration, separate setup services and applicable taxes are additional.

Issuer	Seller	VMC / year	CMC / year
GlobalSign	SSL2BUY (Prime)	$900	$750
GlobalSign	Bimimi	$1,099	$899
SSL.com	Bimimi	$1,350	$1,035
GlobalSign	Direct	$1,450	$1,035
SSL.com	Direct	$1,500	$1,150
DigiCert	Bimimi	$1,590	$1,190
DigiCert	Direct	$1,752	$1,416

SSLmarket also lists a DigiCert VMC at $1,400 per year for one domain.

The lowest one-year prices in this list are SSL2BUY’s GlobalSign-powered Prime certificates: $900 for a VMC and $750 for a CMC. The issuer performs validation and issues the certificate; the seller handles the purchase. Buying through a reseller does not change the issuing certificate authority.

DigiCert’s direct prices above are its published 12-month auto-renewing subscription totals. All rows use a one-year purchase term; discounted annual rates tied to multi-year purchases are excluded. Confirm the final checkout total, taxes and renewal rate before ordering.

VMC and CMC certificate requirements

Certificate	Logo requirements	Gmail result
Common Mark Certificate (CMC)	Prior-use logos: at least 12 months of use under the issuer’s validation rules. Certain modified registered marks also qualify.	Logo, without the verified checkmark
Verified Mark Certificate (VMC)	A matching registered logo trademark from an accepted office, or an eligible government mark	Logo and verified checkmark

Google confirms that Gmail accepts both CMCs and VMCs, and reserves its checkmark for VMC-verified senders. GlobalSign’s CMC requirements include at least 12 months of active logo use. A logo used for less than 12 months does not meet that prior-use requirement. See the list of accepted trademark offices for BIMI VMC certificates for eligibility, registration providers and waiting times.

Multiple domains and additional-domain prices

GlobalSign supports multiple domains on one VMC or CMC when they use the same logo. Covered names are included as subject alternative names (SANs). GlobalSign documents same-logo coverage across multiple domains, and DigiCert’s CMC ordering documentation accepts multiple domain names. Each name requires domain-control validation.

Domain coverage and pricing are set by the issuer and product. List every sending domain and subdomain in the order; a certificate does not automatically cover other names your business owns. Different logos require separate certificate validation.

Bimimi’s GlobalSign offers allow up to 10 domains and charge $1,099 per additional VMC domain or $899 per additional CMC domain for one year. Two domains cost $2,198 for a VMC or $1,798 for a CMC. GlobalSign’s direct store lists additional domains at $1,160 for a VMC and $828 for a CMC per year.

Ordering and setting up the certificate

Have the issuer confirm your logo’s eligibility, especially if the trademark is pending or the logo has changed.
Check that legitimate email passes DMARC before moving to the enforcement policy BIMI requires.
Get a written total for every sending domain, including renewal and reissuance charges.
Decide who will host the certificate and logo, publish DNS, and replace the certificate at renewal.

Suped can help with DMARC readiness, logo and certificate hosting, and publishing the BIMI record. Contact us for help.